City architects want east-west microsegmentation inside the Libraries tenant and also hard isolation from the Courts tenant. How should those goals be treated?
Select an answer to reveal the explanation.
Short Explanation
Locking rooms inside the Libraries wing is not the same as keeping Courts out of the building. Microseg (later GBP-style policy) shapes east-west inside a tenant; VRFs/VNIs keep tenants apart. You often want both—do not pretend one control does the other's job.
Full Explanation
Inter-tenant isolation (separate L2/L3 contexts) and intra-tenant microsegmentation (for example GBP within a tenant) solve different problems. They can and often should coexist: VRFs/VNIs separate Libraries from Courts, while microseg limits east-west paths among Libraries workloads. GBP alone does not make VRFs optional, and intra-tenant policy does not magically scrub another tenant from the underlay.